Hybrid Security & Compliance Analyst – SOC 2 & HITRUST Lead

Doist; United States; Hybrid; USD 80,000 - 130,000; Full time

Benefits offered by this job

Health coverage

HSA contributions

401(k) plan

Equity

Annual bonus up to 15%

Remote-first with NYC office reimburse

Job summary

Parachute Health is transforming post-acute care with a leading digital ordering platform for medical equipment. This hybrid role blends compliance/audit with hands-on security, owning end-to-end audits (SOC 1, SOC 2, HITRUST CSF/AI) while addressing vulnerability management and cloud security in AWS.

You’ll collaborate across teams to strengthen controls and drive remediation. You’ll develop policies, coordinate with external parties, and contribute to security awareness initiatives.

Qualifications

• 4+ years in security compliance/GRC and hands-on security.
• Experience in SOC 1/ SOC 2 and HITRUST audits through at least one full cycle.
• Knowledge of HIPAA Security and Privacy requirements.
• Ability to read CVEs and cloud security issues; familiarity with AWS.

Responsibilities

• Own SOC 1, SOC 2, HITRUST audits end-to-end and coordinate findings remediation.
• Develop and implement security policies for HIPAA, SOC, HITRUST and general compliance.
• Manage compliance automation platforms (Drata, SafeBase) and monitor controls.
• Coordinate with vendors/clients for audits and customer security questionnaires.
• Run vulnerability management and remediation with engineering teams.
• Review AWS security findings (IAM, WAF, CloudFront) and fix gaps.
• Support security incident response and forensic evidence collection.
• Assist legal/eDiscovery with data preservation and investigations.

Skills

Security compliance

Hands-on security

Audit coordination

Policy writing

Threat analysis

Education

CISSP

CISA

CRISC

HITRUST CCSFP

CISM

Tools

Drata

SafeBase

AWS

SIEM tools

Job description

Parachute Health is transforming post-acute care with a leading digital ordering platform for medical equipment. This hybrid role blends compliance/audit with hands-on security, owning end-to-end audits (SOC 1, SOC 2, HITRUST CSF/AI) while addressing vulnerability management and cloud security in AWS.

You’ll collaborate across teams to strengthen controls and drive remediation. You’ll develop policies, coordinate with external parties, and contribute to security awareness initiatives.